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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)H Responsive to communication(s) filed on 13 July 2007 . 
2a)S This action is FINAL. 2b)Q This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) KI Claim(s) 1-7, 10-14, 16-21,23.24,26-31 and 33 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) Kl Claim(s) 1-7,1 0-1 4.1 6-21. 23,24,26-31 and 33 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)Q objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1. This Office action is responsive to the following communication: Amendment filed on 13 July 
2007. 

2. Claims 1-7, 10-14, 16-21, 23-24, 26-31, and 33 are pending and present for examination. Claims 
1, 16, and 26 are in independent form. 

Response to Amendment 

3. No claims have been amended. 

4. No claims have been added. 

5. Claims 8-9, 15, 22, 25, 32, and 34 have been cancelled. 

Claim Rejections - 35 USC § 102 

6. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis 
for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use 
or on sale in this country, more than one year prior to the date of application for patent in the United States. 

7. Claims 1-7, 10, 12-13, 15-21, 23, 25-31, and 33-34 are rejected under 35 U.S.C. 102(b) as 
being anticipated by Joshi et al (USPGPUB No. 2002/0091798, hereinafter referred to as JOSHI), filed on 
26 February 2001, and published on 11 July 2002. 

8. As per independent claims 1, 16 and 26, JOSHI teaches: 

A system for sharing confidential semiconductor manufacturing information comprising: 
an access monitor module for authorizing user access to confidential information {See 

JOSHI, [0196], wherein this reads over "Access Server authentication module 540 then authenticates 
the user using the user ID and password"}; 

an information sharing module for creating a transitory link to the confidential 
information in response to a user being authorized to access the confidential 
information {See JOSHI, [0124], wherein this reads over "[authorization event handler 516 
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performs steps in a method for determining whether a user of browser 12 or 14 is authorized to 
access a requested resource upon a successful authentication or receipt of a valid authentication 
cookie"} stored in a database; and 

a transitory link maintenance module for maintaining the transitory link and 
selectively removing the transitory link from the system {See joshi, [0148], wherein 
this reads over "[o]nce authenticated, a user can explicitly log out, causing authentication cookies 
cached (or otherwise stored) by the user's browser to be destroyed or become invalid''}; 

wherein the transitory link is a symbolic link {See joshi, [0080], wherein this reads over "[a] 
resource can include a web page, software application, file, database"; [0081], wherein this reads 
over "the resource name includes a host name, a file name" and M [t]he file name is the path name to 
the file on the machine"; [0147], wherein this reads over "an encrypted authentication cookie"}. 

9. As per dependent claim 2, JOSHI teaches: 

The system of claim 1 wherein the access monitor module monitors user idle time and 
may grant access to the system upon verifying user authorization to access the 

system {See JOSHI, [0209], wherein this reads over "[i]f the time elapsed since the session start time 
exceeds a maximum session time, the cookie will become invalid. Idle start time is also stored, which 
identifies the time when the previous HTTP request for a protected resource was made in which cookie 
was passed. If the time elapsed since the idle start time exceeds a maximum idle time, the cookie will 
become invalid"}. 

10. As per dependent claims 3, 17 and 27, JOSHI teaches: 

The system of claim 2 wherein the access monitor module denies user access to the 
system if the user idle time exceeds an allowable time limit {See joshi, [0148], wherein 
this reads over "[authentication cookies can also be set by an administrator to be destroyed after a 
maximum idle time has elapsed between requests to resources protected in accordance with the present 

invention"}. 

11. As per dependent claims 4, 18 and 28, JOSHI teaches: 

The system of claim 1 wherein the information sharing module determines whether the 
confidential information is information the user is authorized to access and, in 
response to the confidential information being information the user is authorized to 
access, the information sharing module creating the transitory link {See joshi, [0i5i], 
wherein this reads over "the method attempts to determine whether the user is authorized to access the 
requested resource. If the user is authorized (step 790), the method proceeds to step 792 . . . [where] 
the successful authorization of the user is logged in step 792, authorization success actions are performed 
in step 794, and the user is granted access to the requested resource in step 795"}. 

12. As per dependent claims 5, 19 and 29, JOSHI teaches: 

The system of claim 1 further comprising: a user privilege file, whereby the information 
sharing module creates the transitory link when the confidential information 
corresponds to information contained in the user privilege file {See joshi, [0i5i], wherein 
this reads over "the method attempts to determine whether the user is authorized to access the requested 
resource. If the user is authorized (step 790), the method proceeds to step 792 . . . [where] the 
successful authorization of the user is logged in step 792, authorization success actions are performed in 
• step 794, and the user is granted access to the requested resource in step 795"; and [0153], wherein this 
reads over "if a successful mapping has- occurred (step 838), then Access Server 34 retrieves the 
authentication rule (step 844) and audit rule (step 846) associated with the requested resource"}. 
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13. As per dependent claims 6, 20 and 30, JOSHI teaches: 

The system of claim 1 wherein the access monitor module uses cookies to authorize 
access to the confidential information {See joshi, [0124], wherein this reads over 
"[authorization even handler 516 performs steps in a method for determining whether a user of browser 
12 or 14 is authorized to access a requested resource upon a successful authentication or receipt of a valid 
authentication cookie"}. 

14. As per dependent claim 7, 21 and 31, JOSHI teaches: 

The system of claim 1 further comprising: 

an information list and request link disconnected from the confidential information, 
whereby upon creation of the transitory link, the information list and request link 
is connected to the confidential information through the transitory link to allow 
for accessing of the confidential information {See JOSHI, [0151], wherein this reads over 
"the method attempts to determine whether the user is authorized to access the requested resource. 
If the user is authorized (step 790), the method proceeds to step 792 .. . [where] the successful 
authorization of the user is logged in step 792, authorization success actions are performed in step 
794, and the user is granted access to the requested resource in step 795"}. 

15. As per dependent claims 10, JOSHI teaches: 

The system of claim 1 wherein the transitory link maintenance module removes the 
transitory link when the system indicates that the confidential information is no 
longer authorized to be accessed {See JOSHI, [0151], wherein this reads over "[otherwise, the 
unsuccessful authorization is logged in step 796. After step 796, the method performs authorization failure 
actions (step 798) and Web Gate 28 denies the user access to the requested resource"}. 

16. As per dependent claim 12, JOSHI teaches: 

The system of claim 1 further comprising: a network coupled to the system {See joshi, 
[0011], wherein this reads over "an access system that provides data to resources available on a 
network"; and [0080], wherein this reads over "a resource is anything accessible to a user on a network. 
The network could be the Internet, a LAN, a WAN, or any other type of network"}. 

17. As per dependent claim 13, JOSHI teaches: 

The system of claim 1 further comprising: a database coupled to the system {See joshi, 
[0080], wherein this reads over "[a] resource can include a web page, software application, file, 
database"}. 

18. As per dependent claim 15 and 25, JOSHI teaches: 

The system of claim 1 wherein the transitory link is a symbolic link {See joshi, [0226], 
wherein this reads over "the resource determines whether there are any header variables to consider. If 
there are no header variables, then in step 1834, the resource responds to the request. Responding to the 
request can include providing a web page, access to a software process or anything else appropriate for 
the particular resource. If, in step 1832, it is determined that there are header variables, then in step 1836 
the resource searches for a particular variable name. In order to use header variables, the resource must 
be preprogrammed to know what header variables to expect and how to use them."}. 



19. 



As per dependent claims 23 and 33, JOSHI teaches: 



Application/Control Number: 10/820,576 Page 5 

Art Unit: 2161 

The method of claim 12 wherein the removing is performed after the confidential 
information has been accessed through the transitory link {See joshi, [0148], wherein this 
reads over "[authentication cookies can also be set by an administrator to be destroyed after a maximum 
idle time has elapsed between requests to resources protected in accordance with the present invention"}. 

Claim Rejections - 35 USC§ 103 

20. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to a 
person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

21. Claims 11, 14 and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable over JOSHI, 
in view of Official Notice. 

22. As per dependent claims 11 and 24, JOSHI, in combination with Official Notice, discloses a 
system wherein the system exists within a virtual integrated circuit fabrication system since it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to include an access 
authentication system to protect confidential integrated circuit fabrication information. 

23. As per dependent claim 14, JOSHI, in combination with Official Notice, discloses a system 
wherein the access monitor module, the information sharing module, and the transitory link maintenance 
module are all written in the common gateway interface (CGI) since it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to use CGI, a well-known programming 
method, for writing modules of the claimed system. 

Response to Arguments 

24. Applicant's arguments filed 13 July 2007 have been fully considered but they are not persuasive, 
a. Claim Rejections under 35 U.S.C. 102 

Applicant asserts the argument that "Joshi fails to teach at least 'wherein the transitory 
link is a symbolic link'." See Amendment, page 7. The Examiner respectfully disagrees. In 
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response to applicant's argument that the references fail to show certain features of applicant's 
invention, it is noted that the features upon which applicant relies (i.e., M a symbolic link ... is an 
indirect pointer to a file." See Applicant's Specification, [0051]) are not recited in the rejected 
claim(s). Although the claims are interpreted in light of the specification, limitations from the 
specification are not read into the claims. See In re Van Geuns, 988 F.2d 1181, 26 USPQ2d 1057 
(Fed. Cir. 1993). Furthermore, it is noted that Joshi clearly anticipates and teaches every 
element of claim 1 under the broadest reasonable interpretation. Accordingly, the claim 
rejections under 35 U.S.C. 102 are sustained for the reasons above, 
b. Claim Rejections under 35 U.S.C. 103 

The claim rejections under 35 U.S.C. 103 are sustained because Applicant has not 
traversed the rejections nor presented any arguments for overcoming the rejections contained in 
the prior Office Action, dated 8 June 2007. Furthermore, by virtue of dependency, the rejections 
of said claims are sustained for the reasons stated above in relation to Claims 1 and 16. 

Conclusion 

25. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time policy as set 
forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE MONTHS from 
the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the mailing date 
of this final action and the advisory action is not mailed until after the end of the THREE-MONTH 
shortened statutory period, then the shortened statutory period will expire on the date the advisory 
action is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing 
date of the advisory action. In no event, however, will the statutory period for reply expire later than SIX 
MONTHS from the mailing date of this final action. 
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Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to Paul Kim whose telephone number is (571) 272-2737. The examiner can normally be 
reached on M-F, 9am - 5pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Apu 
Mofiz can be reached on (571) 272-4080. The fax phone number for the organization where this 
application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 
866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative or 
access to the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Paul Kim 

Patent Examiner, Art Unit 2161 
TECH Center 2100 




